mirror of
https://github.com/openwrt/packages.git
synced 2025-12-10 12:41:22 +00:00
f8d25a0b0f
Reduce idle_timeout parameter from 10s to 9s as recommended upstream
Add a pointer to upstream documentation
Ref: 7f07bde70e/stubby.yml.example (L249)
Signed-off-by: Andris PE <neandris@gmail.com>
69 lines
3.0 KiB
Plaintext
69 lines
3.0 KiB
Plaintext
config stubby 'global'
|
|
option manual '0'
|
|
option trigger 'wan'
|
|
# option triggerdelay '2'
|
|
list dns_transport 'GETDNS_TRANSPORT_TLS'
|
|
option tls_authentication '1'
|
|
option tls_query_padding_blocksize '128'
|
|
# option tls_connection_retries '2'
|
|
# option tls_backoff_time '3600'
|
|
# option timeout '5000'
|
|
# option dnssec_return_status '0'
|
|
option appdata_dir '/var/lib/stubby'
|
|
# option trust_anchors_backoff_time 2500
|
|
# option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key'
|
|
option edns_client_subnet_private '1'
|
|
option idle_timeout '9000'
|
|
option round_robin_upstreams '1'
|
|
list listen_address '127.0.0.1@5453'
|
|
list listen_address '0::1@5453'
|
|
# option log_level '7'
|
|
# option command_line_arguments ''
|
|
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
|
|
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
|
|
# option tls_min_version '1.2'
|
|
# option tls_max_version '1.3'
|
|
|
|
# Upstream resolvers are specified using 'resolver' sections.
|
|
# Extensive list of public DoT servers can be found in upstream stubby sources
|
|
# https://github.com/getdnsapi/stubby/blob/develop/stubby.yml.example
|
|
config resolver
|
|
option address '2606:4700:4700::1111'
|
|
option tls_auth_name 'cloudflare-dns.com'
|
|
# option tls_port 853
|
|
# list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
|
|
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
|
|
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
|
|
# option tls_min_version '1.2'
|
|
# option tls_max_version '1.3'
|
|
|
|
config resolver
|
|
option address '2606:4700:4700::1001'
|
|
option tls_auth_name 'cloudflare-dns.com'
|
|
# option tls_port 853
|
|
# list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
|
|
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
|
|
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
|
|
# option tls_min_version '1.2'
|
|
# option tls_max_version '1.3'
|
|
|
|
config resolver
|
|
option address '1.1.1.1'
|
|
option tls_auth_name 'cloudflare-dns.com'
|
|
# option tls_port 853
|
|
# list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
|
|
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
|
|
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
|
|
# option tls_min_version '1.2'
|
|
# option tls_max_version '1.3'
|
|
|
|
config resolver
|
|
option address '1.0.0.1'
|
|
option tls_auth_name 'cloudflare-dns.com'
|
|
# option tls_port 853
|
|
# list spki 'sha256/yioEpqeR4WtDwE9YxNVnCEkTxIjx6EEIwFSQW+lJsbc='
|
|
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20'
|
|
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256'
|
|
# option tls_min_version '1.2'
|
|
# option tls_max_version '1.3'
|